fix: validate URL in compare_extraction before newspaper/requests fetch

Close SSRF gap where compare_extraction fetched via newspaper3k and
requests.get without _validate_url, unlike the trafilatura path.

Co-authored-by: Mervin Praison <[email protected]>

examples/python/tools/trafilatura/custom_trafilatura_tools.py

@@ -279,7 +279,17 @@ class TrafilaturaTools:
             "newspaper": None,
             "spider": None
         }
-        
+
+        # Validate the URL once before any fetcher runs so the newspaper and
+        # requests paths below are protected against SSRF, just like the
+        # trafilatura path (which validates inside extract_content).
+        if not self._validate_url(url):
+            error = {"error": f"Invalid or unsafe URL: {url}"}
+            comparison["trafilatura"] = error
+            comparison["newspaper"] = error
+            comparison["spider"] = error
+            return comparison
+
         # Get Trafilatura extraction
         try:
             comparison["trafilatura"] = self.extract_content(url)